Tenable Web App Scanning CI/CD Scanning with Atlassian Bamboo Integration

You can deploy a Tenable Web App Scanning Docker image in continuous integration and continuous delivery/continuous deployment CI/CD against your application in Atlassian Bamboo. For more information on this integration, see the Atlassian Bamboo documentation.

Before you begin:

Be able to deploy your app to an integration environment available to your Bamboo build agent, or run it directly on the build agent for testing.
Review the overview information in CI/CD Application Scan Overview.

Pipeline workflow file example for Atlassian Bamboo:


#!/usr/bin/env bash

# start your application
docker pull swaggerapi/petstore
docker run -d -e SWAGGER_URL=http://petstore:8080 -e SWAGGER_BASE_PATH=/v2 --name petstore swaggerapi/petstore

# run the scanner
docker pull tenable/was-scanner:latest
docker run -v $(pwd):/scanner -t -e WAS_MODE=cicd -e ACCESS_KEY=${bamboo_ACCESS_KEY} -e SECRET_KEY=${bamboo_SECRET_KEY} --link petstore tenable/was-scanner:latest

Example integrations for CI/CD tools: